Hi, I know a lot of developers will ignore this question because this service is being sold but I am just hoping if maybe there will be someone who can share on how to protect the data.saf like it won't be opened with some tools. I also would like to know how to open other server data.saf
Help with file protection
- Thread starter Zhein
- Start date
the .saf is nothing more than a blob. the .sah is what they try to protect, because it defines the values you need to read the data from the .saf. if you have the offset and length of the file you want, you can write a program to seek the offset, read the bytes, and write the file.
most people still use the file count xor method. the key is in plain sight in raw format when the file count is null. in this case, you can find the key next to the folder name. some use multiple keys or different math, so don't expect it to be that easy.
anyhow, you don't have to crack their encryption. study the .sah format and the function the client uses to parse the file. it creates file and folder objects, so you can get the filename, offset, and length and append them to a .txt file (e.g. filename,12341234,1234). then, write a program to read each line, pass the filename, offset, and length to some functions, and extract the file.
most people still use the file count xor method. the key is in plain sight in raw format when the file count is null. in this case, you can find the key next to the folder name. some use multiple keys or different math, so don't expect it to be that easy.
anyhow, you don't have to crack their encryption. study the .sah format and the function the client uses to parse the file. it creates file and folder objects, so you can get the filename, offset, and length and append them to a .txt file (e.g. filename,12341234,1234). then, write a program to read each line, pass the filename, offset, and length to some functions, and extract the file.
laotianye
Member
- Joined
- Oct 9, 2023
- Messages
- 5
tyvm.its very detailed,but i dont know how to program.If possible, could you share a tool or source code to encrypt or decrypt my own sah
once upon a time, Cups shared some code. it can be used to encrypt the file too with some editing. if you like C#, the source code for Parsec will be helpful.
[Source] Decrypting Shen's XOR File Count Encryption
The encryption keys obviously differ for each client, and can be found by simply opening the client in OllyDBG and searching for "xor r32,const&qu
www.elitepvpers.com
laotianye
Member
- Joined
- Oct 9, 2023
- Messages
- 5
tyvm.I will try, although it may be challenging for meonce upon a time, Cups shared some code. it can be used to encrypt the file too with some editing. if you like C#, the source code for Parsec will be helpful.
[Source] Decrypting Shen's XOR File Count Encryption
The encryption keys obviously differ for each client, and can be found by simply opening the client in OllyDBG and searching for "xor r32,const&qu
this should help you get started. it's a very basic windows forms app. it comes with a sah class, etc. open Form1.cpp and add your key to the Crypto constructors. i tested with xor, but i didn't test with add or subtract. i encourage you to work toward a better system.
laotianye
Member
- Joined
- Oct 9, 2023
- Messages
- 5
Thanks again, it worked, the encrypted SAH cannot be opened, and after decryption, it becomes openable, but my client doesn't seem to use it, how can I change this to the client as well
you have to find the sah read function in your client and set a detour where it reads the file count and decrypt the value after it's read from the file. you have to do it before it uses the count to iterate the files in the folder. the client uses a C function to read the data files.
the updater is the same. if i remember correctly, this has to be done in two places. this is partly why i wrote my own updater. once you start doing something more complex than file counts, this will become a huge pain in the ass. writing the updater was less painful.
laotianye
Member
- Joined
- Oct 9, 2023
- Messages
- 5
yeah.After reading your reply, I am already in painyou have to find the sah read function in your client and set a detour where it reads the file count and decrypt the value after it's read from the file. you have to do it before it uses the count to iterate the files in the folder. the client uses a C function to read the data files.
the updater is the same. if i remember correctly, this has to be done in two places. this is partly why i wrote my own updater. once you start doing something more complex than file counts, this will become a huge pain in the ass. writing the updater was less painful.
i feel like it's better to learn the format of the files you want to protect. Parsec has all the code you need to write the crypto programs. example: if you don't want people copying the items, you'd encrypt item.sdata. the best part is, you won't have to modify the updater.